Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json)
Hash identifier: 50YQGElAXQkwX7Y18Svt3Jp2KQHwziuUi3y5y9gES74=
Subject key identifier: AF:A8:B9:27:A9:A5:31:2D:81:96:90:56:57:D3:4D:F8:98:9B:1C:81
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
Manifest number: B0
Signing time: Fri 31 Jan 2025 05:22:54 +0000
Manifest this update: Fri 31 Jan 2025 05:22:54 +0000
Manifest next update: Fri 07 Feb 2025 05:22:54 +0000
Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: iSXQTpepM5FdINwJzsxS10ZGP/uiCGt4HVb3IpqWQZE=)
2: 97D6B88618D511EFAC43EE73C4F9AE02.roa (hash: u8zPnTnR8vdMXMZM3gfu234Z3NZHwyNarOREwLy/WOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Validity
Not Before: Jan 31 05:22:54 2025 GMT
Not After : Feb 7 05:22:54 2025 GMT
Subject: CN=679c5e2e-c03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:34:56:b3:ff:77:2c:94:55:5d:17:cf:ac:
36:18:f5:a9:10:63:9e:f4:0e:63:d9:68:5c:73:be:
d6:25:66:e9:bd:7b:c7:57:f7:76:91:87:88:13:73:
05:3c:cf:96:4e:37:c8:10:e5:26:16:ef:c7:af:c2:
f2:8d:33:cf:41:6d:11:3e:21:09:5f:2f:49:fa:d1:
90:f8:a5:cf:1b:37:85:55:47:9c:92:be:be:a6:c2:
fd:c6:8a:62:18:82:3f:4b:a5:86:35:cc:4e:46:1e:
1c:de:be:c2:d2:f4:05:9e:ff:d1:1c:ec:24:df:e5:
f1:a0:ee:05:80:9b:52:22:3d:f6:6b:5a:33:a3:c0:
8c:96:8f:e8:64:cf:54:06:f2:e4:61:f4:60:c9:c3:
86:fb:60:59:a3:1a:e3:39:85:ac:ab:ce:28:d4:28:
60:f1:b9:e9:f1:37:f7:9c:03:45:c0:50:cf:bc:ad:
c4:33:21:e2:da:9e:73:c5:75:86:43:62:49:34:56:
e4:80:84:9a:9d:36:be:ce:4b:cf:3a:b9:92:6b:e3:
c7:e7:d2:05:5b:b1:72:b3:03:a2:d9:12:e2:38:80:
27:bb:3d:05:3e:2a:38:00:06:e8:cc:f2:a0:62:67:
f9:18:cc:91:d8:60:ec:e6:02:48:b3:ca:20:2e:7c:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:B9:27:A9:A5:31:2D:81:96:90:56:57:D3:4D:F8:98:9B:1C:81
X509v3 Authority Key Identifier:
keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:3e:3c:32:61:ee:fd:b6:92:3d:d6:8b:d8:37:f6:8a:5d:
73:58:a6:a4:09:a1:10:cd:63:b2:0e:be:eb:88:c7:f5:51:bb:
8e:c7:03:0a:c4:74:6c:1e:18:d3:62:3a:17:87:cc:cc:b0:18:
28:87:b6:45:fc:e4:cc:61:8b:22:7c:71:43:28:dc:86:93:c1:
80:89:b3:0f:43:78:6d:63:73:26:76:4c:c4:25:2a:93:4e:a4:
c2:5c:ba:5e:2a:e6:06:d6:f9:12:db:0d:ce:bf:0f:f1:e0:9a:
61:e1:9e:23:ea:43:f6:c1:a4:37:48:f2:00:63:0c:fd:e4:90:
48:da:99:5d:b3:d5:4e:be:c6:97:95:a7:5a:c1:7a:ec:0d:0d:
71:b8:f2:29:b9:b6:dc:73:4d:74:21:23:f6:71:c5:27:e2:77:
78:2d:be:dd:d4:97:6a:22:a6:b1:ab:8e:96:20:ef:81:45:07:
f2:9f:c8:ee:6e:f8:09:e6:ea:61:a3:8f:50:92:26:b6:78:83:
b6:44:6b:1e:b6:ba:b7:6f:ef:d8:32:b8:8e:f4:a9:7e:63:a7:
bf:ec:7e:d4:c9:2c:b6:ea:ca:44:a4:21:eb:d4:3e:11:ea:9e:
b3:ab:1d:bb:29:a4:24:6a:93:bf:da:36:ac:f0:a0:9f:74:31:
0b:9e:20:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF
NUQwNkE0NEIwHhcNMjUwMTMxMDUyMjU0WhcNMjUwMjA3MDUyMjU0WjAYMRYwFAYD
VQQDEw02NzljNWUyZS1jMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlec0VrP/dyyUVV0Xz6w2GPWpEGOe9A5j2Whcc77WJWbpvXvHV/d2kYeIE3MF
PM+WTjfIEOUmFu/Hr8LyjTPPQW0RPiEJXy9J+tGQ+KXPGzeFVUeckr6+psL9xopi
GII/S6WGNcxORh4c3r7C0vQFnv/RHOwk3+XxoO4FgJtSIj32a1ozo8CMlo/oZM9U
BvLkYfRgycOG+2BZoxrjOYWsq84o1Chg8bnp8Tf3nANFwFDPvK3EMyHi2p5zxXWG
Q2JJNFbkgISanTa+zkvPOrmSa+PH59IFW7FyswOi2RLiOIAnuz0FPio4AAbozPKg
Ymf5GMyR2GDs5gJIs8ogLnwulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+ouSep
pTEtgZaQVlfTTfiYmxyBMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC
NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV
QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAatT48MmHu/baSPdaL2Df2il1zWKakCaEQzWOyDr7riMf1UbuOxwMK
xHRsHhjTYjoXh8zMsBgoh7ZF/OTMYYsifHFDKNyGk8GAibMPQ3htY3MmdkzEJSqT
TqTCXLpeKuYG1vkS2w3Ovw/x4Jph4Z4j6kP2waQ3SPIAYwz95JBI2plds9VOvsaX
ladawXrsDQ1xuPIpubbcc010ISP2ccUn4nd4Lb7d1JdqIqaxq46WIO+BRQfyn8ju
bvgJ5upho49Qkia2eIO2RGsetrq3b+/YMriO9Kl+Y6e/7H7UySy26spEpCHr1D4R
6p6zqx27KaQkapO/2jas8KCfdDELniD9
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:51 2025 by rpki-client